Changing CCRF to CSRF